Senior Security Engineer

Endpoint is a digital title and settlement company built from the ground up to make home closing easy for all. For many, buying or selling a home is one of life's biggest transactions. At Endpoint, we help our customers close every deal so they can start their next chapter with confidence. Whether it's a first-time homebuyer choosing a place to start a family, a real estate agent securing a record-breaking deal, or a proptech company scaling its services, we believe that closing on a home is a milestone worth celebrating and a process that should be easy for all parties involved.

Founded in 2018 by a diverse group of tech and real estate veterans, Endpoint develops technology that streamlines home closing for real estate agents, buyers and sellers, and empowers proptech companies and investors looking to scale their closing operations. Backed by First American Financial Corporation, a Fortune 500 company, Endpoint has secured $220 million in funding and has operations across the US.

We are looking for a Senior Security Engineer to partner with our Business and Engineering teams to secure the applications and infrastructure that empower an effortless closing experience for our users.

*We are open to remote candidates for this role

As a Senior Security Engineer, you will use your skills to:

• Respond to ongoing incidents, investigate historical compromises, and provide adept analysis and findings
• Define strategies for threat detection, alerting, and response; implement strategies in cooperation with engineering teams
• Initiate reactive and proactive threat hunting engagements by performing endpoint, network, application, and log analysis
• Work with and communicate effectively with product leaders to detect and respond to attacks
• Define processes and build 'playbooks' of operational response to incidents
• Architect, design, implement, support and evaluate security-focused tools and services

You'll come to Endpoint with:

• 3-5+ years experience managing security incidents and/or experience working in a Detection & Response team or equivalent function
• Superb communication and leadership capacity; ability to partner effectively with diverse company stakeholders
• Proficiency in at least 1 programming or scripting language (preference to Python, Go, and JavaScript)
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP/HTTPS) and how to keep them secure
• Diverse range of security experience at the enterprise level (information, application, network, and IT)
• Experience protecting against and mitigating real world attacks (DDoS, XSS, session-hijacking, SQL injection, CSRF, etc)
• Practical experience working with cloud technologies (eg. Amazon Web Services, Google Cloud Platform, Heroku, Microsoft Azure, etc.)
• Experience coordinating with GRC/Internal Audit team in the facilitation of external audits (SOX, PCI DSS, HIPAA) a plus
• Strong Offensive security experience and ability to understand attacker TTP's and conduct threat models
• Ability to speak and read Russian is a plus

Why work at Endpoint:

• You'll join a fast-growing company where you can make an impact
• You'll work alongside industry experts and the brightest minds in tech to transform an industry
• We foster a vibrant, welcoming, and inclusive company culture
• You'll be entrusted with responsibility and autonomy in your day-to-day work
• You'll have opportunities to advance your career from within, or for internal mobility
• Customizable benefits including Health, Dental, Vision, and 401K Match
• Flexible work options for certain roles
• Virtual and in-person team events
• We offer competitive compensation; Base pay is one part of your total compensation package in addition to annual bonus. This role pays between $145,000 and $205,000 and your actual base pay will depend on your skills, qualifications and experience. We also offer a long-term incentive plan.

This hiring range is a good faith and reasonable estimate of the salary range of possible compensation at the time of posting and is subject to change. The actual compensation offered will be determined by various factors, which may include a candidate's education, training and experience.

#BI-Remote

#LI-Remote

Endpoint is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected under federal, state or local law.